CVE-2022-39388
1 advisory.
Go/github.com/istio/istio CVE-2022-39388: high 7.6
Istio may allow identity impersonation if user has localhost access
Action: Upgrade github.com/istio/istio to 1.15.3 or later.
go get github.com/istio/istio@v1.15.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.15.0-beta.0 | 1.15.3 | - |
Fixed versions
| 1.15.3 |
Sources
- osv: GHSA-6c6p-h79f-g6p4
- https://github.com/istio/istio/security/advisories/GHSA-6c6p-h79f-g6p4
- https://nvd.nist.gov/vuln/detail/CVE-2022-39388
- https://github.com/istio/istio/commit/346260e5115e9fbc65ba8a559bc686e6ca046a32
- https://github.com/istio/istio/commit/9a643e270421560afb2630e00f76d46a55499df9
- https://github.com/istio/istio
- https://istio.io/latest/news/releases/1.15.x/announcing-1.15.3
CVE-2022-39388 · published · modified · JSON